macOS configuration profile which enables audit mode for Microsoft Defender's tamper protection

gistfile1.txt

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1">
   <dict>
      <key>PayloadUUID</key>
      <string>05F0ADFE-8BE0-4C43-BACB-BD0DE6272306</string>
      <key>PayloadType</key>
      <string>Configuration</string>
      <key>PayloadOrganization</key>
      <string>Company Name</string>
      <key>PayloadIdentifier</key>
      <string>com.microsoft.wdav</string>
      <key>PayloadDisplayName</key>
      <string>Enabling Tamper Protection for Microsoft Defender</string>
      <key>PayloadDescription</key>
      <string>Microsoft Defender tamper protection configuration settings</string>
      <key>PayloadVersion</key>
      <integer>1</integer>
      <key>PayloadEnabled</key>
      <true />
      <key>PayloadRemovalDisallowed</key>
      <true />
      <key>PayloadScope</key>
      <string>System</string>
      <key>PayloadContent</key>
      <array>
         <dict>
            <key>PayloadUUID</key>
            <string>977D6F1E-E6C1-4BD2-96C5-D4FFCEAE92BB</string>
            <key>PayloadType</key>
            <string>com.microsoft.wdav</string>
            <key>PayloadOrganization</key>
            <string>Microsoft</string>
            <key>PayloadIdentifier</key>
            <string>com.microsoft.wdav</string>
            <key>PayloadDisplayName</key>
            <string>Microsoft Defender tamper protection configuration settings</string>
            <key>PayloadDescription</key>
            <string />
            <key>PayloadVersion</key>
            <integer>1</integer>
            <key>PayloadEnabled</key>
            <true />
            <key>tamperProtection</key>
            <dict>
               <key>enforcementLevel</key>
               <string>audit</string>
            </dict>
         </dict>
      </array>
   </dict>
</plist>